About
hydra tries lists of usernames and candidate values against a login service. It covers many protocols and web forms. Use it only against systems you own or have written permission to test.
Install it
pkg install hydra
Run this inside Termux. If the package is already present, pkg will say so and
do nothing.
Commands worth knowing
5 of the invocations you will actually reach for. Tap the copy button to put one on your clipboard.
hydra -l admin -P pass.txt ssh://192.168.1.10 Test a list of candidates against one account on a server you own, to confirm a lockout policy engages. hydra -L users.txt -P pass.txt ftp://192.168.1.10 Check many accounts at once on a service you are authorised to audit. hydra -l admin -P pass.txt -t 4 192.168.1.10 http-post-form Exercise a login form on your own test application to see whether it resists guessing. hydra -l admin -P pass.txt -f -V ssh://192.168.1.10 Stop at the first success and show every attempt. Useful for tuning a rule set. hydra -L users.txt -P pass.txt -s 2222 ssh://192.168.1.10 Run the check against a service listening on a non-standard port. Worked example
Run hydra -l admin -P pass.txt ssh://192.168.1.10 and this is what you should see.
$ hydra -l admin -P pass.txt ssh://192.168.1.10
[DATA] max 4 tasks, 1 server
[DATA] attacking ssh://192.168.1.10:22/
[22][ssh] host: 192.168.1.10 login: admin password: changeme
1 of 1 target successfully completed
1 valid password found Developed by
The Hacker's Choice (THC) .